WinSecWiki > Security Settings > Advanced Audit Policies > Account Management > Application Group Management

Audit Application Group Management

Application groups are part of Windows's role based access control for applications and are maintained in the Authorization Manager MMC snap-in. To configure this on Server 2008 and Vista you must use auditpol. Windows 7 and Server 2008 R2 can use Group Policy.

Coverage on events generated by this category are currently in the Security Log Encyclopedia:

Event ID	Title
4783	A basic application group was created.
4784	A basic application group was changed.
4785	A member was added to a basic application group.
4786	A member was removed from a basic application group.
4787	A non-member was added to a basic application group.
4788	A non-member was removed from a basic application group.
4789	A basic application group was deleted.
4790	An LDAP query group was created.
4791	A basic application group was changed.
4792	An LDAP query group was deleted.

Back to top

 

Upcoming Webinars Operational Technology: The Growing Cyber-Kinetic Front in the SecOps War Identity Fabric: Stitching Together IAM or Selling the Emperor’s New Clothes?

Additional Resources